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Abstract 

This paper investigates the utilization of differential thrust to help a commercial aircraft with a 
damaged vertical stabilizer regain its lateral/directional stability. In the event of an aircraft losing its 
vertical stabilizer, the consequential loss of the lateral/directional stability and control is likely to cause a 
fatal crash. In this paper, an aircraft with a completely damaged vertical stabilizer is investigated, and a 
unique differential thrust based adaptive control approach is proposed to achieve a stable flight envelope. 

The propulsion dynamics of the aircraft is modeled as a system of differential equations with engine time 
constant and time delay terms to study the engine response time with respect to a differential thrust 
input. The proposed differential thrust control module is then presented to map the rudder input to 
differential thrust input. Model reference adaptive control based on the Lyapunov stability approach is 
implemented to test the ability of the damaged aircraft to track the model aircraft’s (reference) response 
in an extreme scenario. Investigation results demonstrate successful application of such differential thrust 
approach to regain lateral/directional stability of a damaged aircraft with no vertical stabilizer. Finally, 
the conducted robustness and uncertainty analysis results conclude that the stability and performance of 
the damaged aircraft remain within desirable limits, and demonstrate a safe flight mission through the 
proposed adaptive control methodology. 

Nomenclature 

A/C aircraft 

A state matrix 

B input matrix 

b aircraft wing span 

C output matrix 

CLi dimensionless derivative of rolling moment, i = 6a, Sr 

CNi dimensionless derivative of yawing moment, i = /3, 6a, 6r 

Cvi dimensionless derivative of side force, i = p^r, [3^ 6a, 6r 
D state transition matrix 

^ change in side wash angle with respect to change in side slip angle 

g gravitational acceleration 

Ixx normalized mass moment of inertia about the x axis 

Ixz normalized product of inertia about the xz axis 
Izz normalized mass moment of inertia about the z axis 
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dimensional derivative of rolling moment, i = /3, Sa^ Sy 

vertical stabilizer lift force 

distance from the vertical stabilizer aerodynamic center to the aircraft center of gravity 
Model Reference Adaptive System 
aircraft mass 

dimensional derivative of yawing moment, i = p, r, Sa^Sy, ST 
roll rate 
yaw rate 

aircraft wing area 
vertical stabilizer area 
engine thrust 
engine thrust command 
time 

time delay 

vertical stabilizer volume ratio 

airspeed 

aircraft weight 

dimensional derivative of side force, i = p, r, Sa, Sy 

distance from the outermost engine to the aircraft center of gravity 

distance from the vertical stabilizer center of pressure to the fuselage center line 

angle of attack 

side slip angle 

flight path angle 

aileron deflection 

rudder deflection 

collective thrust 

differential thrust 

damping ratio 

efficiency factor 

pitch angle 

air density 

time constant 

roll angle 

bandwidth frequency 

first order time derivative 

second order time derivative 

trimmed value 

damaged aircraft component 

model aircraft component 

nominal (undamaged) aircraft component 


1 Introduction 

The vertical stabilizer is an essential element in providing the aircraft with its directional stability character¬ 
istic while ailerons and rudder serve as the primary control surfaces of the yawing and banking maneuvers. 
In the event of an aircraft losing its vertical stabilizer, the sustained damage will cause lateral/directional 
stability to be compromised, and the lack of control is likely to result in a fatal crash. Notable examples of 
such a scenario are the crash of the American Airline 587 in 2001 when an Airbus A300-600 lost its vertical 
stabilizer in wake turbulence, killing all passengers and crew members and the crash of Japan Airlines 
Flight 123 in 1985 when a Boeing 747-SRlOO lost its vertical stabilizer leading to an uncontrollable aircraft, 
resulting in 520 casualties [^. 

However, not all situations of losing the vertical stabilizer resulted in a total disaster. In one of those 
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cases, the United Airlines Flight 232 in 1989 [^, differential thrust was proved to be able to make the aircraft 
controllable. Another remarkable endeavor is the landing of the Boeing 52-H even though the aircraft lost 
most of its vertical stabilizer in 1964 [^. 

Research on this topic has been conducted with two main goals: to understand the response characteristics 
of the damaged aircraft such as the work of Bacon and Gregory [^, Nguyen and Stepanyan [^, and Shah [^, 
as well as to come up with an automatic control algorithm to save the aircraft from disasters, where similar 
such as the work of Burcham et ah [^, Guo et ah 


Nielsen 13 


10 , Liu et ah 11 , Tao and loanou 12 , and Urnes and 


Notable research on the topic of a damaged transport aircraft includes the work of Shah [^, where a wind 
tunnel study was performed to evaluate the aerodynamic effects of damages to lifting and stability/control 
surfaces of a commercial transport aircraft. In his work, Shah studied this phenomenon in the form 
of partial or total loss of the wing, horizontal, or vertical stabilizers for the development of flight control 
systems to recover the damaged aircraft from adverse events. 

In literature, there exists a similar study conducted by Stepanyan et al. [^, which provides a general 
framework for such problem but lacks some very crucial details. In this work, we address those crucial points 
and provide evidence why it should be improved as stated in this study. In addition, the work of Nguyen 
and Stepanyan investigates the effect of the engine response time requirements of a generic transport 
aircraft in severe damage situations associated with the vertical stabilizer. They carried out a study which 
concentrates on assessing the requirements for engine design for fast responses in an emergency situation. 
In addition, the use of differential thrust as a propulsion command for the control of directional stability 
of a damaged transport aircraft was studied by Urnes and Nielsen 13 to identify the effect of the change 


in aircraft performance due to the loss of the vertical stabilizer and to make an improvement in stability 
utilizing engine thrust as an emergency yaw control mode with feedback from the aircraft motion sensors. 

Existing valuable research in literature provides insight regarding the dynamics of such an extreme 
scenario, including some unique studies on nonlinear control 
fault detection and isolation methodologies 


23 and diverse applications such as adaptive 


24 . In this paper, in comparison to the existing works, a novel 


framework and a methodology is provided where Model Reference and Lyapunov based adaptive control 
methodology is implemented to aid such a damaged aircraft to land safely, with provided asymptotic stability 
guarantees. 

The paper is organized as the following: The nominal and damaged aircraft models are derived in Section 
The plant dynamics of both the nominal (undamaged) aircraft and of the damaged aircraft are investigated 
in Section In Section the engine dynamics of the jet aircraft are modeled as a system of differential 
equations with corresponding time constant and time delay terms to study the engine response characteristic 
with respect to a differential thrust input. In Sectiona novel differential thrust control module is developed 
to map a rudder input to a differential thrust input. In Sectionthe aircraft’s open loop system response is 
investigated. Then in Sectiona Linear Quadratic Regulator controller is designed to stabilize the damaged 
aircraft and provide model reference dynamics. In Section the Lyapunov stability approach based model 
reference adaptive control methodology is implemented to test the ability of the damaged aircraft to mimic 
the model aircraft’s (reference) response and achieve safe (and stable) operating conditions. In Section]^ 
robustness and uncertainty analysis is conducted to test the stability and validate the overall performance 
of the system in the presence of uncertainty. In Section [T^ the paper is finalized. 


2 The Aircraft Models 

2.1 The Nominal Aircraft Model 

For this research, the Boeing 747-100 was chosen as the main application platform to demonstrate that 
such Lytapunov and Model Reference Adaptive Gontrol (MRAG) based strategy is applicable to commercial 
aviation jetliners. The data for the nominal (undamaged) Boeing 747-100 are summarized in Table 

Taken from Nguyen and Stepanyan |^, the lateral/directional linear equations of motion of the nominal 
(undamaged) aircraft, with the intact ailerons and rudder as control inputs, are presented as 
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Table 1: The nominal (undamaged) aircraft data 15 16 


Parameter 

Value 

s {m 

5500 

bift) 

196 

c (ft) 

27.3 

Ve {ft) 

69.83 

W (lbs) 

6.3663 10'’ 

m (slugs) 

19786.46 

I XX {slug* fi^) 

18.2 * 10*^ 

lyy {slug * ft^) 

33.1 * 10** 

Izz {slug*ft^) 

49.7 * 10*^ 

Ixz {slug * ft^) 

0.97 * 10*^ 

Cl0 

-0.160 

CLy 

-0.340 

CLr 

0.130 

Cls„. 

0.013 

Cl Sr 

0.008 

Cnp 

0.160 

Cnp 

-0.026 

Cnv 

-0.28 

CNSa 

0.0018 

CN5r. 

-0.100 

Cvp 

-0.90 

Cvp 

0 

Cvr 

0 

CvSa 

0 

^YSr 

0.120 
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where the states are and r, which represent the roll angle, roll rate, side-slip angle, and yaw 

rate, respectively. The corresponding control inputs are 6a (aileron input/command) and 6r (rudder in¬ 
put / command). 


2.2 The Damaged Aircraft Model 


For the modeling of the damaged aircraft, in case of the loss of the vertical stabilizer, lateral/directional 
stability derivatives need to be reexamined and recalculated. Since in this study it is assumed that the 
vertical stabilizer is completely lost/damaged, the whole aerodynamic structure will be affected, and the new 
corresponding stability derivatives have to be calculated, and studied. The lateral/directional dimensionless 
derivatives that depend on the vertical stabilizer include 


17 



Due to the loss of the vertical stabilizer, the vertical tail area, volume, and efficiency factor will all be 
zero; therefore, Cy y = Cvr = C'wr = 0- h the vertical stabilizer is assumed to be the primary aerodynamic 
surface responsible for the weathercock stability, then Cn y = 0. Finally, Clv = 

In addition, without the vertical stabilizer, the mass and inertia data of the damaged aircraft are going 
to change, where the values that reflect such a scenario (for the damaged aircraft) are listed in Table 


Table 2: The damaged aircraft mass and inertia data 


Parameter 

Value 

W (lbs) 

6.2954 

m (slugs) 

19566.10 

Ixx {slug * fC) 

17.893 * 10“ 

lyy {slug * fC) 

30.925 lO^' 

{slug*fe) 

47.352 * 10® 

Ixz {slug * fC) 

0.3736 10*^ 


In this study, during an event of the loss of the vertical stabilizer, it is proposed that the differential 
thrust component of aircraft dynamics be utilized as an alternate control input replacing the rudder control 
to regain stability and control of lateral/directional flight dynamics. Next, the lateral-directional linear 
equations of motion of the damaged aircraft are presented, with the ailerons {6a)^ differential thrust (^T), 
and collective thrust (AT) as control inputs [^, as 
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In this case, if the initial trim side-slip angle is zero, then AT does not have any significance in the control 
effectiveness for a small perturbation around the trim condition |^, which means that the above equations 
of motion can be reduced to the final form of governing equations of motion for damaged aircraft as: 
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2.3 Flight Conditions 

In this research, the flight scenario is chosen to be a steady, level cruise flight for the Boeing 747-100 at 
Mach 0.65 (with the corresponding airspeed of 673[/t/5ec]) at 20,000[/t] altitude. It is assumed that at one 
point during the flight, the vertical stabilizer is completely damaged and the aircraft remains with virtually 
no vertical stabilizer. 

In the followings, the means to control aircraft is investigated in such an extreme case scenario. For this 
purpose, next nominal (undamaged) and damaged aircraft models are developed for analysis. 


3 Plant Dynamics 

With the given flight conditions data and information provided in Table [TJ the corresponding state space 
representation for the lateral/directional dynamics of the nominal (undamaged) Boeing 747-100 are obtained 
as 


0 

1 

0 

0 


0 

0 

0 

-0.8566 

-2.7681 

0.3275 

, Bn = 

0.2249 

0.1384 

0.0478 

0 

-0.1079 

-1 

0 

0.0144 

0 

-0.0248 

1.0460 

-0.2665 


0.0118 

-0.6537 


Cn ^(4x4)^ L)n ^{4x2) (^0) 


Based on the data for the lateral/directional stability derivatives of the aircraft without its vertical 
stabilizer (as given in Section II. |2.2[ ), the lateral/directional representation of the damaged aircraft can be 
achieved as 


0 

1 

0 

0 


0 

0 

0 

-0.8566 

-2.7681 

0.1008 

, Bd = 

0.2249 

0.0142 

0.0478 

0 

0 

-1 

0 

0 

0 

-0.0248 

0 

0 


0.0118 

0.6784 


Cd — Cri — I {4x4)-) L)(i — Dji — ^(^4x2) 
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Here, An defines the state matrix of the nominal, undamaged aircraft whereas represents the state 
matrix of the damaged aircraft. Furthermore, Bn represents the input matrix where the ailerons {6a) and 
rudder {6r) are control inputs of the undamaged (nominal) aircraft whereas Bd stands for the input matrix 
of the scenario where the ailerons {6a) and differential thrust {6T) are control inputs of the damaged aircraft. 
It is also worth noting that the structure of the input matrix of the nominal aircraft {Bn) and of damaged 
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aircraft (Bd) remain fairly similar, except for the 632 term. In 632 equals 0.0144, but 632 equals 0 in B^, 
which removes the effect of differential thrust on side-slip angle. 

At this point, we would like to emphasize a very major distinction between the existing studies in literature 
(including Stepanyan et al. [^) and this work. 


Remark 1. It is a very well known (text hook) faet that statie direetional stability (in sense of side-slip) 
of an aireraft is aehieved through the vertieal stabilizer. Without the means of the vertieal stabilizer, the 
statie direetional stability of an aireraft remains very ehallenging. This is also very elearly shown through 


the aerodynamie stability derivative analysis (presented in Seetion- 2.2) and is evident from the eomparison 
and Bd as presented in and Eq[Tl\ respeetively. If Eq\ll\ 


of Bn 


is observed earefully, it will be elear 


that in ease of the complete loss of vertieal stabilizer there will be absolutely no eorrespondenee between any 
of the 6a and/or St inputs vs. the side-slip angle (/3) whieh is disregarded in the existing works in literature. 
This ereates a unique strueture of the input matrix-B and provides ehallenges in terms of singularities to the 
eontrol system design. Thus, we propose the following strueture of a severely damaged aireraft dynamies to 
refleet a real-life applieable seenario. 


Assumption 1. Based on the eondueted aerodynamie stability analysis, a damaged aireraft with eomplete 
loss of vertieal stabilizer preserves the eontrol (input) matrix strueture as. 


Bd 


0 0 

^21 ^22 

0 0 

641 642 


(13) 


and is assumed to have limited eontrol authority to represent the damaged vertieal stabilizer seenario. 

Through Eq.(p^, Assumption-[^ and based on the geometric analysis of damaged aircraft aerodynamic 
stability derivatives presented in Section- 2 . 2 , we emphasize on the fact that, (with the completely damaged 
vertical fin) there exists mapping only to yaw and roll dynamics, but not necessarily side-slip dynamics. 
Thus, Assumption-!^ and analysis conducted in Section- [23] is important and crucial. 

Next, in addition to the structure of control matrix, here we present the damping characteristics of the 
nominal and damaged aircraft, and are summarized in Table and Table for further investigation. 


Table 3: Damping characteristics of the nominal aircraft 


Mode 

Pole Location 

Damping 

Frequency (1/s) 

Period (s) 

Dutch Roll 

-0.126 ±il.06 

0.118 

1.07 

5.8822 

Spiral 

-0.0172 

1 

0.0172 

365.2651 

Roll 

-0.963 

1 

0.963 

6.5262 


Table 4: Damping characteristics of the damaged aircraft 


Mode 

Pole Location 

Damping 

Frequency (1/s) 

Period (s) 

Dutch Roll 

0.0917 ±i0.43 

-0.209 

0.439 

14.2969 

Spiral 

6.32 * 10-1“ 

-1 

6.32 * 10-1“ 

9.9486 * 10^^ 

Roll 

-1.04 

1 

1.04 

6.0422 


Table shows that all three lateral/directional modes of the nominal aircraft are stable due to the Left 
Half Plane (LHP) pole locations whereas Table [^clearly indicates the unstable nature of the damaged aircraft 
in the Dutch roll mode by the Right Half Plane (RHP) pole locations. Furthermore, the pole of the spiral 
mode lies at the origin, which represents very slow (also unstable) dynamics. The only stable mode of the 
damaged aircraft is the roll mode due to the Left Half Plane (LHP) pole location. The pole locations of 
both the nominal and damaged aircraft are also illustrated in Fig. 

In the analysis of aircraft dynamics without the vertical stabilizer, propulsion dynamics will play a vital 
role in the maneuverability of the aircraft and deserves a thorough investigation, which is investigated in 
further detail in the following section. 
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Figure 1: Pole locations of the nominal (blue) and damaged aircraft (red) 


4 Propulsion Dynamics 

With emerging advancements in manufacturing processes, structures, and materials, it is a well known fact 
that aircraft engines have become highly complex systems and include numerous nonlinear processes, which 
affect the overall performance (and stability) of the aircraft. From the force-balance point of view, this is 
usually due to the existing coupled and complex dynamics between engine components and their relationships 
in generating thrust. However, in order to utilize the differential thrust generated by the jet engines as a 
control input for lateral/directional stability, the dynamics of the engine need to be modeled in order to gain 
an insight into the response characteristics of the engines. 

Engine response, generally speaking, depends on its time constant and time delay characteristics. Time 
constant dictates how fast the thrust is generated by the engine, while time delay (which is inversely propor¬ 
tional to the initial thrust level) is due to the lag in engine fluid transport and the inertias of the mechanical 
systems such as rotors and turbo-machinery blades |^. 

It is also suggested that the non-linear engine dynamics model can be simplified as a time-delayed 
second-order linear model as 

f + 2Cujf + uj‘^T = uj‘^Tc{t - td) (14) 

where C and uj are the damping ratio and bandwidth frequency of the closed-loop engine dynamics, respec¬ 
tively; td is the time delay factor, and Tc is the thrust command prescribed by the engine throttle resolver 
angle. 

With the time constant defined as the inverse of the bandwidth frequency (r = ^), and ( chosen to be 1 
representing a critically damped engine response (to be comparable to existing studies), the engine dynamics 
can be represented as 


T 

f 


0 

-1 


1 

-2 


T 

t 


Tc{t-td) (15) 

For this study, the Pratt and Whitney JT9D-7A engine is chosen for the application in the Boeing 747-100 


example, where the engine itself produces a maximum thrust of 46,500 Ibf 


14 


At Mach 0.65 and 20,000 
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feet flight conditions, the engine time constant is 1.25 seconds, and the time delay is 0.4 second 





Figure 2: Engine thrust response at Mach 0.65 and 20,000 feet 

The engine thrust response curve at Mach 0.65 and 20,000 feet is, therefore, obtained as shown in Fig. 
which provides a useful insight into how the time constant and time delay factors affect the generation 
of thrust for the JT9D-7A jet engine. At Mach 0.65 and 20,000 feet, with the engine time constant of 1.25 
seconds, and the time delay of 0.4 second, it takes approximately ten seconds for the engine to reach steady 
state and generate its maximum thrust capacity at 46,500 Ibf from the trim thrust of 3221 Ibf. The increase in 
thrust generation follows a relatively linear fashion with the engine response characteristic of approximately 
12,726 Ibf/s during the first two seconds, and then the thrust curve becomes nonlinear until it reaches its 
steady state at maximum thrust capacity after about ten seconds. This represents one major difference 
between the rudder and differential thrust as a control input. Due to the lag in engine fluid transport and 
turbo-machinery inertias, differential thrust (as a control input) cannot respond as instantaneously as the 
rudder, which has to be taken into account very seriously in control system design. 


5 Differential Thrust as a Control Mechanism 


5.1 Thrust Dynamics and Configuration 

In order to utilize differential thrust as a control input for a conventional four-engined (which could be 
very easily adapted to a twin engine) aircraft, a differential thrust control module is developed to provide a 
mapping between the rudder dynamics and corresponding thrust values. As it is a well known (text book 
type) concept, the overall differential thrust input is defined as the net generated thrust. In this scenario, it 
is defined as the net thrust as a result of engine number 1 and engine number 4 dynamics, while the amounts 


of thrust generated by remaining engines are kept equal, and fixed as shown in Eqs. (^17) to balance the 
associated torque/moment values. This concept is illustrated in further details in Fig.^ 
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(16) 

(17) 


ST = Ti- T4 

T2 = n 



Figure 3: The free body diagram 

Engine number 1 and 4 are employed to generate the differential thrust due to the longer moment arm 
(ye), which makes the differential thrust more effective as a control for yawing moment. This brings into 
the picture the need of developing a logic that maps a rudder input to a differential thrust input, which is 
further explained in the following section. 

5.2 Rudder Input to Differential Thrust Input Mapping Logic 

When the vertical stabilizer of an aircraft is intact (i.e. with nominal plant dynamics), ailerons and rudder 
remain as major control input mechanisms. However, when the vertical stabilizer is damaged, the control 
effort from the rudder will not respond. To eliminate this mishap, but to still be able to use the rudder 
demand, a differential thrust control module is introduced in the control logic, as shown in Fig. [^and Fig. 
respectively. This differential thrust control module is responsible for mapping corresponding input/output 
dynamics from the rudder pedals to the aircraft response, so that when the rudder (and whole vertical 
stabilizer) is completely lost, the rudder input will still be utilized but switched/converted to a differential 
thrust input, which acts as the rudder input for lateral/directional controls. This logic constitutes one of 
the novel approaches introduced in this paper. 

As it can be also seen from Fig. and Fig. the differential thrust control module’s function is to 
convert the rudder (pedal) input to the differential thrust input. In order to achieve that, the rudder (pedal) 
input (in radians) is mapped to the differential thrust input (in pounds-force) which is then provided into 
the engine dynamics, as discussed previously in Section With this modification, the engine dynamics 
will dictate how differential thrust is generated, which is then provided as a ’’virtual rudder” input into the 
aircraft dynamics. The radian to pound-force conversion, even if it is straight forward text book information, 
is derived and provided in the next section, for completeness. 
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Figure 4: Aircraft control logic diagram 
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Figure 5: Differential thrust control module 


5.3 Radian to Pound-Force Conversion Factor 

Using Fig. [^and with the steady, level flight assumption, the following relationship can be obtained: 

Ns^ = Nst (18) 

qSbCNsJr = {ST)ye (19) 

which means the yawing moment by deflecting the rudder and by using differential thrust have to be the 
same. Therefore, the relationship between the differential thrust control input (ST) and the rudder control 
input (Sr) can be obtained as 


6T = Sr (20) 

Based on the flight conditions at Mach 0.65 and 20,000 feet, and the data for the Boeing 747-100 
summarized in Table ?? and Table the conversion factor for the rudder control input to the differential 
thrust input is calculated to be 


ST 

Sr 


-4.43 10® 

rad 


( 21 ) 


Due to the sign convention of rudder deflection and the free body diagram in Fig. Sr here is negative. 
Therefore, for the Boeing 747-100, in this study, the conversion factor for the mapping of a rudder input to 
a differential thrust input is found to be 


T = 4,43 ^ iqS iT (22) 

Sr rad 

5.4 Commanded vs. Available Differential Thrust 

Unlike the rudder, due to delayed engine dynamics with time constant, there is a major difference in the 
commanded differential thrust and the available differential thrust as shown in Fig. 
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Figure 6: Commanded vs. available differential thrust 


It can be seen from Fig. [^that compared to the commanded differential thrust, the available differential 
thrust is equal in amount but longer in the time delivery. For a one degree step input on the rudder, the 
corresponding equivalent commanded and available differential thrust are 7737 Ibf, which are deliverable in 
ten second duration. Unlike the instantaneous control of the rudder input, there is a lag associated with the 
use of differential thrust as a control input. This is due to the lag in engine fluid transport and the inertias of 
the mechanical systems such as rotors and turbo-machinery blades |^. This is a major design consideration 
and will be taken into account during the adaptive control system design phase in the following sections. 

6 Open Loop System Response Analysis 

Following to this, the open loop response characteristics of the aircraft dynamics with a damaged vertical 
stabilizer to a one degree step input from the ailerons and differential thrust are presented in Fig. It 
can be clearly seen that when the aircraft is majorly damaged and the vertical stabilizer is lost, the aircraft 
response to the provided inputs is completely unstable in all four states (as it was also obvious from the pole 
locations). This means the control authority (or pilot) will not have a chance to stabilize the aircraft in time, 
which calls for a novel approach to save the damaged aircraft. This is another point where the second novel 
contribution of the paper is introduced: automatic control strategy to stabilize the aircraft, which allows 
safe (i.e. intact) landing of the aircraft. 

7 Linear Quadratic Regulator Design for Model Plant Dynamics 

7.1 Background Theory 

As it is well known from literature that optimal control aims for the best (optimal) results within a given 
set of constraints. An optimal controller is usually designed to minimize a Performance Index (PI), which 
is generally defined as the ultimate collection of all valuable metrics that are of interest to the designer. 
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On that note, here we present the methodology of obtaining an Linear Quadratic Regulator (LQR) based 
controller parameters for model plant dynamics that is going to be used in Adaptive Control theory. 

Taken from 


18 , consider the optimal regulator problem as the following: 


Given the system equation: 

X = Ax + Bu 

Determine the gain matrix K of the optimal control vector: 


(23) 


-Kx 


(24) 


to minimize the Performance Index (PI): 


PI = J = 


f 


{x^Qx + u^Ru) dt 


(25) 


where Q and R are real, symmetric, positive-definite matrices. It is worth noting that Eq. (25) represents 
the Performance Index, in which x^Qx represents the transient energy cost and vARu represents the control 
energy cost. 


7.2 Stabilizing the Damaged Aircraft with an LQR Controller 

In this section, we will demonstrate the methodology to obtain closed loop stable model plant dynamics for 
the damaged aircraft plant. After an iterative process, the state weighting matrix, Q, and the control cost 
matrix, R, are chosen as 


Q = 10^ 


10 0 0 
0 2 0 0 

0 0 0.1 0 

0 0 0 1 


R = 10^ 


1 0 
0 1 


where the feedback matrix K is then obtained as 


Klqr 


9.6697 13.2854 

1.9631 2.8644 


-9.1487 0.8729 

-12.1067 11.5702 


The model plant matrix. Am = Ad — EdK^QR^ then becomes 


A 


m 


0 1 

-2.2026 -3.8851 

0.0478 0 

-1.4455 -2.1243 


0 0 

-0.5390 -0.2595 

0 -1 

8.3210 -7.8597 


(26) 


(27) 


(28) 


(29) 


Next, closed loop response of obtained model reference plant is provided. 

Compared to the unstable open loop response of the damaged aircraft in Fig. [^in Section the closed 
loop response is stable in all four states in obtained model referenee plant: roll angle (0), roll rate (p), 
side-slip angle (/3), and yaw rate (r). In addition, the control efforts for ailerons and differential thrust are 
also feasible and within the limits of actuator saturation and rate-limiter bounds. From Fig. we can also 
observe that aileron control effort demands the maximum deflection of 1 degree and settles at around -0.7 
degree while differential thrust control effort demands a maximum of -400 Ibf (negative differential thrust 
means T4 > Tl) and settles at approximately 100 Ibf, which is well within the thrust capability of the 
JT9D-7A engine. 
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Figure 8: Closed loop response with an LQR controllei 




















Figure 9: Closed loop control efforts with an LQR controller 


8 Lyapunov Based Model Reference Adaptive System (MRAS) 
Controller Design 

To control an aircraft with a fully damaged vertical stabilizer and with no rudder capability can result to be 
a very stressful and laborious (if not fatal) task for the pilots. This task also requires skills and experience 
which is hard to possess and execute in extremely stressful moments. In such instances, pilots usually have 
seconds to react, and as having been witnessed beforehand, coupling between the pilot and unstable aircraft 
dynamics usually led to a catastrophic crash. Therefore, for the safety of the overall flight, it is crucial for 
an online, and adaptive automatic control system to be developed, tested, and implemented for the aircraft 
to mitigate accidents and to improve safety, stability, and robustness. As an answer to such need, here, we 
introduce a novel, Lyapunov stability based adaptive control system design. 

In conventional model reference adaptive control theory, two celebrated and widely used methods are the 
MIT Rule and the Lyapunov Stability approaches 19 . Because of the Multi-Input-Multi-Output (MIMO) 
structure of the lateral/directional dynamics, the MIT rule will be left alone due to its relatively weak 
controllability characteristics in higher order and complex systems 19 . Instead, the powerful nature of 


Lyapunov based model reference adaptive system (MRAS) contoller design will be utilized. 


8.1 Stability Characteristics 

Theorem 1. For given system dynamies of the damaged aireraft model in Eq. { I~7p2 ), there exists a 
Lyapunov funetion in form of 


V{x) = e^Pe + Tr[{Ad - B^L - A^fN{Ad - B^L - A^)] 
whieh guarantees asymptotie stability, if and only if the feedhaek adjustment law is defined as 


-1 . 


L={B/NBd) B/Peya 


(30) 


(31) 
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Proof: Let’s consider the suggested Lyapunov function taken from 20 


V{x) = e^Pe + Tr[{Ad - B^L - N{Ad - B^L - A^)] + Tr[{BdM - B^f R{BdM - B^)] (32) 

For given damaged aircraft dynamics, it is desired that aircraft maintains control (input) matrix structure 
as defined in Assumption leading to so in Eq. (32), Tr[(5^M — R{BdM — Bm)] = 0. 

Therefore, 


V{x) = e^Pe + Tr[{Aa - B^L - A^fN{Ad - B^L - A^)] 


(33) 


Here N is the weighting factor, and Tr is the ’’Trace” of expression. Also, let’s consider Am = A^ — B^Ki^qr^ 
as iterated further in Section-7.2 It is straight-forward that V{x) > 0,Vx ^ 0, E(0) = 0, and V{x) is 
continuously differentiable. For given system, error dynamics {e = i/d — Vm) becomes 


e = Vd- y'm 

— {^dVd H" BdU^ (^Amym T BmUc) 
With the defined control effort u = Uc — Li/d, 

^ ~ ^dyd Bd{Uc Lyd) ^mym Bm'djc 
where ym = yd — After some algebra, we get 


(34) 


(35) 


^ T ^dL Amf)yd T (-^d 

Again, for given damaged aircraft dynamics, it is desired that aircraft maintains limited control (input) 
matrix structure as defined in Assumption i, leading to Bm = Bd. Thus, 

^ ~ T {^d BdL Am)yd 

With L = L"" P AL where L* is the constant feedback gain and AL represents the parameter adjustment 
uncertainty, and Ad — Am = BdL"" ^ 


e = AmeP {Ad -Am- Bd{L^ + AL))yd = A^e + (H^L* - - BdAL)yd (38) 


Therefore, 


^ BdALyd 


The derivative of the Lyapunov function from Eq. (30) can be obtained as 


V{x) = -e^Qe + 2Tr[-AL^B'^Peyd^ + AL'^BjNBdAL] 


(39) 

(40) 


where A^XP + PAm = —Q, with positive-definite matrix Q selected to be equal to the Observability 
Gramian, C^C. From here, it is clear that the negative definite nature of Lyapunov function (F(a;) < 0), 
and therefore, the asymptotic stability of the overall system dynamics is guaranteed when 


AL'^i-BjPey'^ + BjNBdAL) = 0 

is satisfied. This leads to the final adaptation law: 

L = {BjNBdpBjPey/ 


(41) 


(42) 


which guarantees the asymptotic stability ■ 
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Figure 10: Block diagram structure for adaptive control system 


8.2 Simulation Results 

The representative block diagram architecture for the suggested adaptive control system design (based on the 
Lyapunov stability approach) is illustrated in Fig. 10 The ultimate goal of the proposed adaptive control 


system design is to investigate whether the aircraft with a damaged vertical stabilizer is going to be able to 
mimic model aircraft dynamics and track the response of the model aircraft or not, by utilizing differential 
thrust as a control input for lateral/directional dynamics. The control inputs for both plants are one degree 
step inputs for both the ailerons and differential thrust. It is worth noting that this is an extreme scenario 
test to see whether the damaged aircraft utilizing differential thrust can hold itself in a continuous yawing 
and banking maneuver without becoming unstable and losing control. 

As it can also be seen from Fig. for both the model and the damaged aircraft, the input signals 
for the ailerons and rudder are mapped through the input control module, where the rudder input signal 
is routed through the differential thrust control module and then converted to the differential thrust input 
following the transformation logics discussed in Section of this paper. 

In order to have a feasible control strategy in real-life situation, limiting factors (such as saturation limits 
and rate-limiters) are imposed on the aileron and differential thrust control efforts. The aileron deflection is 
limited at ±26 degrees 22 . For differential thrust, a differential thrust saturation is set at 43,729 Ibf, which 
is the difference of the maximum thrust and trimmed thrust values of the JT9D-7A engine. In addition, a 
rate limiter is also imposed on the thrust response characteristic at 12,726 Ibf/s as discussed in Section Hi 

Following to that, the simulation results of the adaptive control system model are presented in Fig.^llj 
As shown in Fig. II, after only 15 seconds, all four states of the aircraft’s lateral/directional dynamics 


reach steady state values. It can also be clearly seen that after a time interval of 15 seconds the damaged 
aircraft plant can mimic the model aircraft plant where the errors are minimized as shown in Fig. This 
demonstrates the functionality of the Lyapunov based adaptive control system design in such an extreme 
scenario. 


From Fig. 12, it can be observed that the error signals for all four lateral/directional states are diminished 
after 15 seconds. However, this comes at the cost of slightly higher control effort demand, as shown in Fig. 
[T^ which are still within control limits and without any saturation of the actuators. 

The aileron control effort, as indicated by FigHH calls for the maximum deflection of about -2 degrees 
and reaches steady state at approximately -0.7 degree of deflection after 15 seconds responding to a one 
degree step input. This aileron control effort is very reasonable and achievable if the ailerons are assumed to 
have instantaneous response characteristics by neglecting the lag from actuators or hydraulic systems. The 
differential thrust control effort demands a maximum differential thrust of -3000 Ibf (negative differential 
thrust means T4 > TI), which is within the thrust capability of the JT9D-7A engine, and the differential 
thrust control effort reaches steady state at around 85 Ibf after 15 seconds. Therefore, it can be concluded 
that the adaptive control system design with the utilization of differential thrust as a control input is proven 
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Figure 11: Adaptive control outputs 
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Figure 13: Adaptive control efforts 


to save the damaged aircraft by making it behave like the model aircraft, but the feasibility of the adaptive 
control method depends heavily on the thrust response characteristics of the aircraft jet engines. 


9 Robustness Analysis of Adaptive Control System Design 

The robustness of the adaptive system design presented in this paper is investigated by the introduction of 
30% of full block, additive uncertainty into the plant dynamics of the damaged aircraft, to test its ability 
to track the reference response of the model aircraft in the presence of uncertainty. Fig. [14] shows the logic 
behind the adaptive control system design in the presence of uncertainty. 

One thousand Monte-Carlo simulations were conducted to test the robustness of the damaged plant in 
the presence of uncertainty. The state responses in the presence of 30% uncertainty are shown in Fig. 15 It 


is obvious that the adaptive control system design is able to perform well under given uncertain conditions 
and the damaged aircraft can follow/mimic the response of the model aircraft only after approximately 15 
seconds. In that sense, the uncertain plant dynamics are well within the expected bounds. 

The robustness of the adaptive control system design can be further illustrated in Fig. [^that all the error 
signals reach steady state and converge to zero only after 15 seconds. However, these favorable characteristics 


come at the expense of the control effort from the ailerons and differential thrust as shown in Fig. 17 

According to Fig. when there is 30% full block, additive uncertainty, the aileron control demands 
the maximum deffection of approximately -1 degree and reaches steady state at around -0.4 to -0.3 degree 
after 15 seconds. The aileron control effort demands are reasonable and feasible due to the limiting factor 
of ± 26 degrees of the aileron deffection 
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and the assumption that ailerons have instantaneous response 
characteristics by neglecting the lag from actuators or hydraulic systems. 

As for differential thrust, when there is 30% uncertainty, the differential thrust control demands at 
maximum approximately -3400 Ibf (negative differential thrust means T4 > Tl), which is within the thrust 
capability of the JT9D-7A engine, and the differential thrust control effort reaches steady state at around 
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Figure 14: Block diagram for adaptive control system in the presence of uncertainty 





Figure 15: Adaptive control outputs in the presence of 30% uncertainty 
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Figure 16: Adaptive error signals in the presence of 30% uncertainty 
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Figure 17: Adaptive control efforts in the presence of 30% uncertainty 
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the range of -350 Ibf to 450 Ibf after 15 seconds. Again, due to the differential thrust saturation set at 43,729 
Ibf and the thrust response limiter set at 12,726 Ibf/s, this control effort of differential thrust in the presence 
of uncertainty is achievable in real life situation. 


10 Conclusion 

This paper studied the utilization of differential thrust as a control input to help a Boeing 747-100 aircraft 
with a damaged vertical stabilizer to regain its lateral/directional stability. 

Throughout this paper, the necessary nominal and damaged aircraft models were constructed, where 
lateral/directional equations of motion were revisited to incorporate differential thrust as a control input 
for the damaged aircraft. Then the plant dynamics of both the nominal (undamaged) aircraft and of the 
damaged aircraft were investigated, and a special aerodynamic-stability-derivative-case (due to severely 
damaged aircraft geometry) is derived. The engine dynamics of the jet aircraft was modeled as a system of 
differential equations with engine time constant and time delay terms to study the engine response time with 
respect to a commanded thrust input. Next, the novel differential thrust control module was then presented 
to map a rudder input to a differential thrust input. The Linear Quadratic Regulator controller was designed 
to provide a stabilized model for the damaged aircraft dynamics. The ability of the damaged aircraft to 
track and mimic the behavior of the model aircraft in an extreme scenario was illustrated through the 
adaptive control system design based on the Lyapunov stability theory. Demonstrated results showed that 
the unstable open-loop damaged plant dynamics could be stabilized using adaptive control based differential 
thrust methodology. Further analysis on robustness showed that uncertain plant dynamics was able to follow 
model plant dynamics with asymptotic stability, in the presence of 30% full block, additive uncertainty, 
associated with damaged aircraft dynamics. 

Overall, this framework provides an automatic control methodology to save the severely damaged aircraft 
and avoid the dangerous coupling of the aircraft and pilots, which led to crashes in a great number of 
commercial airline incidents. Furthermore, it has also been concluded that due to the heavy dependence of 
the differential thrust generation on the engine response, in order to better incorporate the differential thrust 
as an effective control input in a life-saving scenario, major developments in engine response characteristics 
are also desired to better assist such algorithm. 
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